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Abstract 

Dynamical systems can be prone to severe fluctuations due to the presence of chaotic 
dynamics. This paper explains for a toy chaotic economic model how such a system can 
be regulated by the application of relatively weak control to keep the system confined to 
a bounded region of the phase space, even in the presence of strong external disturbances. 
Since the control here is weaker than the disturbance, the system cannot be controlled to a 
particular trajectory, but under certain circumstances it can be partially controlled to avoid 
extreme values. Partial control depends on the existence of a certain set called a “safe sets”. 
We describe the safe set and how it varies with parameters, sometimes continuously and 
sometimes discontinuously. 
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1 Introduction 

Partial control (II1.0.0) concerns a situation in which there is a map / : ->■ and a compact 

region Q c in which the dynamics of Xn+i = f{xn) are chaotic and for almost every initial point 
xq, the trajectory /"'(xq) eventually leaves Q. 

A bounded disturbance and a bounded feedback control are added to /, and the goal of 

the controller is to keep the trajectory of x„+i = /(x„) + + «„ conhned to Q. Here Un is chosen 

with knowledge of f{xn) + in- We view in as the cumulative result of ongoing disturbances over 

the time interval (n, n + 1], the time since the last control input, and these ongoing disturbances 

are observed by the controller as they occur so that the controller is ready to respond at the end 
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of that interval with the response The control goal is easy to achieve if the control bound if 
is larger than the disturbance bound (3 but we investigate situations in which il < /9. In our case 
it is impossible to select an unstable trajectory and choose the control so that that trajectory is 
followed. The strategies of choosing Un depend on the bounds it and [3 and this paper investigates 
how the strategy depends on these bounds in the case where f is a one-dimensional piecewise 
expanding map. 

The subject of controlling chaotic systems has been dealt with in several papers in the past so it 
is important to clarify how partial control is different. In [1], the authors demonstrate that chaotic 
systems can be controlled by making small time-dependent perturbations to a chaotic system so 
as to steer the state to a nearby periodic trajectory. Their method is applicable to systems whose 
dynamics is not known. In contrast, the method of partial control requires an explicit knowledge 
of the map f and aims at preventing only escape from Q rather than targeting some reference 
trajectory. We begin with a specihc discrete time example to illustrate the nature of this general 
control-problem n. 0- Then we investigate how the problem changes as the parameters change. 

In [3], a method of partial control was proposed to sustain a 3-species predator-prey system 
with chaotic dynamics. The amount of control needed to avoid the extinction of a species was 
demonstrated to be smaller than that needed by classical control methods, even in the case where 

is chosen purposefully to drive the trajectory from Q. In [5], the authors demonstrated that 
the use of partial control leads allows one to apply the control after larger time intervals. They 
investigated the minimum control frequency needed for partial control in a ID tent map and the 
Henon map. 

The requirement that the trajectory must stay in a specihed region has been discussed in the 
control literature as set invariance. The central question that Bertsekas and others (0.0.0) 
investigate is “under what conditions can the state of the uncertain system be forced to stay in a 
specihed region of the state space for all times by using feedback control” ([6]) . This is also our 
question, but in a discrete-time setting. They require the control vector to be of lower dimension 
than that of the state vector since in their framework it would be trivial to control the trajectory 
if the dimensions were equal. We however set the dimensions equal and in this paper both are a 
single variable, that is, one dimensional. The problem is not trivial here because the bound on the 
control is smaller than the bound on the disturbance. 

Our main example uses a one-dimensional tent map and for motivational purposes, we think of 
it as an economic model. Any one-dimensional model of the growth rate x of an economy and its 
dynamics is simplistic. It is likely that any model of any dimension could be called too simplistic 
- because world economies are truly complicated. However the model is complicated enough to 
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introduce complicated phenomena including dangers of economic crashes as the world has recently 
seen. We have also seen that the world economy appears to be unstable, amplifying the effects 
of some disturbances, and our model incorporates that sensitivity. This paper is not aimed at 
saving the world economy but rather at introducing into the control literature a control strategy 
that we believe the control community might hnd valuable. One can argue that the controls 
available to governments are small compared with the disturbances and our model addresses that 
problem of having controls that are weaker than the disturbances. The strategy is to respond to 
the disturbance by driving that trajectory to a maximal “safe” set. This set is not invariant, and 
not even connected, despite the one dimensionality of the problem. 


2 A toy example 


The 1-dimensional map we will use as an example is shown in Fig.([^. It is called an asymmetric 
tent map and is described below. 



0.91-3(x-0.7), 


for 0 < a: < 0.7 
for 0.7 < X < 1 


( 1 ) 


Tent maps can be used to model a variety of physical, biological, and engineering applications, but 
here we restrict attention to an economic growth model. Here x is scaled so that x = 0 corresponds 
to the zero growth rate (during a severe depression in the economy) and x = 1 corresponds to some 
unreachable growth rate. The growth rate in year n is x„. 

The dynamics, is (without external disturbances and control). 


Xr 


M = f{Xn) 


( 2 ) 


Sometimes, allowing an economy to grow too fast can lead to a crash in the economy. That 
feature is seen in Fig. (|^, values of x„ near 0.7 are followed by x„+i near 0.91, in turn leading to 
a crash with x „+2 near 0.28. Subsequent recovery is slow. Without any control, the quantity x has 
repeated crashes. 

Perturbed map. In the presence of strong perturbations, the trajectory can fluctuate even 
more wildly. We add an external perturbation e M, hence : 

Xn+I = f{xn) + in, wliere l^nl < (3 (3) 
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Figure 1: Asymmetric tent map. The piecewise linear and expanding map / from Eqnj^has 
slopes 1.3 and -3 



Figure 2: A chaotic trajectory. The hrst 200 iterates of the asymmetric tent map (Eqn. are 
shown. Notice that whenever Xn is near 0.7, Xn+i is below the red line at 0.5 which denotes our 
threshold for an economic “crash”. These crashes have been indicated as red lines. 
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Figure 3: Perturbed iterates. The first 200 iterates of the perturbed trajectory (Eqns. are 
shown, with the perturbation bound f3 = 0.05. The average value of x is 0.59. Each is chosen 
to be ±/3 so as to exacerbate the crashes. 

Any perturbation satisfying |,^„| < (3 will be called an admissible perturbation, where /3 > 0 is a 
hxed bound. 

A perturbed trajectory with [3 = 0.05 plotted in Fig.([^ shows how disturbances can lead to 
crashing and prolonged depression in the economy. The average of x dropped from 0.65 in Fig. ([^ 
to 0.59 in Fig. ([^, because of disturbances. We shall somewhat arbitrarily say that the event of 
the growth rate falling below 0.5 will be called a crash. Thus we have a target region Q = [0.5,1] 
to which we want to conhne the trajectory (x„). It is a compact (bounded, closed) set. The 
general problem in of keeping a chaotic trajectory in a closed, bound set Q in the presence of 
disturbances stronger than control is described in [1], [2]. ‘ 

The perturbed and controlled map. Knowing the perturbed value f{xn) + we choose 
a control Un satisfying \un\ < il where if > 0 is a constant. Such a control input is called an 
admissible control. The primary goal of the control is to choose admissible Un , given admissible 
so that Xn+i = f{xn) + £ [0.5,1]. The resulting dynamics is : 

Xn+I = f{xn) + ^n + Un, where < 13, and < il (4) 

Each Un is chosen with knowledge of the perturbed value f{xn) + ^n, subject to the constraint 
\un\ < it where il > 0 is a constant. Such a control input is called an admissible control. The 
primary goal is to create a control strategy so that [xn+i) always remains in [0.5,1]. 

Systems with both state and control constraints have been dealt with in [9], |10j and m in a 
spirit similar to ours, but for conventional discrete time control systems. The dependence of their 
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Figure 4: Partially controlled trajectory. The first 200 iterates of a partially controlled tra¬ 
jectory (Eqns. 0i are shown, with the perturbation bound j3 = 0.05 and the control bound 
il = 0.04 < (3. The average value of x now is 0.72. By applying an admissible control bounded by 
il to the same system, the trajectory can be kept above 0.57 for all times by choosing each Un 
so that Xn+i is in the green colored set S' = Ji u J 2 u Fig. [^explains why this strategy can be 
employed to keep in S for all n. 


control strategy on the state and not the perturbation meant that their methods are not applicable 
to ours. The application of control after a perturbation is also not a new concept. For example, 
event-based control strategies (see ( ca) apply control only when triggered by an event, an event 
being a subset of the phase space. Event based control strategies are effective in some discrete 
dynamical systems which are not being monitored in continuous time. In [13], the authors use this 
strategy for designing minimum attention control systems. 

The crash avoidance strategy. In Figure a strategy for choosing admissible Un is used 
that guarantees that the trajectory can be kept in Q for some initial points in Q. Simply put, 
there is a compact set S for which if x is in S, then no matter how the admissible f is chosen, 
there is an admissible u (depending on x and f) such that f{x) + f + u e S. In Fig. the set S is 
the union of three intervals (shown in green). 

We call such a set S a safe set if it has the following property : for each x e S and admissible 
there is a u such that f{x) + f + u € S. The choice of u depends on x and f. 

There is a largest safe set, the maximal safe set, and it has the following properties (SI) and 
(S2), with (S2) actually being stronger than (SI). 

(51) If X € Q - S', then there is an admissible f such that there is no admissible u for which 
that f{x) + f + u ^ S. 

(52) If xo e Q - S', then there is a strategy for choosing admissible fn as a function of Xn such 
that no matter how Un is chosen, the trajectory can be eventually driven out of Q. That is, for 
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Figure 5: The safe set and its dynamics. The colored blocks represent intervals in [0.5,1]. The 
safe set S for Eqns. where it = 0.04 and /3 = 0.05 has components Ji !« [0.5748,0.6142], I 2 
[0.7372,0.7543], I 3 [0.8019,0.8084]. Their images under / are f{h) = /(h) [0.7472,0.7984], 

/(J 3 ) Ri [0.5848,0.6042], as indicated in the hgure by arrows. Let Ji = f{Ii) + (3 denote the interval 
/(/j) thickened by (3. Therefore, for all Xn ^ S and all admissible f{xn) + must be in either 
Ji = J 2 ^ [0.6972,0.8484] or J 3 [0.5348,0.6542]. All the points in this set are within distance 
il(= 0.04) of S. [Note that S'+il r; [0.5348,0.6542] u [0.6972,0.8484]. Hence, there exists admissible 
Un so that f{xn) + Un + IS back in the safe set. 


some N, xn i Q- 


In Figure]^ the safe set is the union of the three intervals A r; [0.57,0.61], I 2 ~ [0.74,0.75] 
and I3 Ri [0.80,0.81]. S' = Ji u /2 u I3. As mentioned earlier, the strategy is to choose each Un so 
that Xn+i lies in the safe set. The surprising consequence of being a safe set is that if Xn e S', no 
matter what admissible occur, an admissible can be chosen so that = f{xn) + 
is again in the safe set. This set S is the largest set in [0.5,1] with this property. The sequence 
of indices {in} such that € li^ is primarily determined by the disturbance ^n- If f{,Xn) + in is 
within distance 0.04 from only one of the three intervals, then Un has to be chosen so that Xn+i is 
in that same interval. 

Unsafe points. Points not in the maximum safe set are points from where it is possible for 
admissible perturbations to drive the trajectory below 0.5 in a hnite number of steps, no matter 
what admissible controls are chosen. In Fig. it is noted in effect that the point x = 0.7 cannot 
be in the safe set and hence is an unsafe point. Conversely, the safe set S denotes the set of 
growth rates x of the economy from which it is always possible to avoid crashes. S depends on 
the parameters it and (3 as well as on the threshold set for crashes, 0.5. This paper investigates 
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how the safe set changes as u and 5 are changed. In [H], Nagnmo provided a necessary and 
snfficient condition for a set to be a safe-set for continnons time control systems in terms a certain 
differential property of the bonndary of the safe set, called tangent cone. In onr partial control 


problem, we also look at geometric properties of the bonndary of the safe set in Theorem 4.1 and 
provide necessary and snfficient conditions for the safe set to be a continnons or discontinnons 
fnnction of the parameters. 

Maximum safe set. The safe set may not exist for some valnes of the bonnds il and (3. 
However, if it exists, there is a maximnm (largest) safe set in Q = [0.5,1]. It is the collection of all 
safe starting points, and is necessarily a compact set. 

Maximnm safe sets represent the snbset of the phase space in which the controlled trajectory 
will nltimately reside. In [2], the anthors dehned the asymptotic safe set to be that snbset of the 
safe set which is invariant nnder the control law. In classical control theory, controlled invariant 
/ viable set is dehned as the set to which it is possible to retnrn after the application of control. 
This concept is the analog of safe sets in classical control theory where control is stronger than 
pertnrbation. In [15], it is discnssed how the control law is highly dependent on the geometry of this 
set. There is an analog of asymptotic safe sets in the held of system engineering, called the domain 
of attraction or stability domain, whose theoretic/compntational determination is of fnndamental 
importance in these helds (see for example, [IS]). Set-invariance also hnds applications in the 
qnalitative analysis of biological systems, as in ini and [3]. In [18], the largest invariant set nnder 
state and control constraints is nsed to improve a control-compensator performance. 


3 Safe set as a function of il and [5 

Fig(|^ shows the safe sets at three valnes of il and (3 for Eqns. 00 The safe set is composed 
of intervals and depends on the parameters il and (3. As seen from the hgnres, the nnmber of 
components can vary, as can the measnre (snm of sizes of the components). 

Fig.|7| shows a plot of the measnre of the safe set as fnnctions of il and (3, with 0 < il < /3. The 
nnmber of components has also been marked for some regions. The measnre (snm of lengths of 
components) has been indicated by color. 

From the plot, some of the observations that can be made are : (i) For every valne of the 
perturbation (3, there is a minimum value of the control il, denoted as Umini/3) for which S is 
nonempty, (ii) Some portions of the graph of Umin seem to be straight lines with slope 1. (hi) 
There are certain boundaries in the plot across which the number of components increase on 
decreasing il or increasing f3. 






(c) 11=0.008, ,5 = 0.01 


Figure 6: Examples of safe sets. The safe sets for the Eqns. [^|^are shown, for three choices 
of it and f3. The safe sets S are marked in green, with the number of components of S labeled. 



Perturbation |3 



Figure 7: Size of the safe set The colored region in this plot denotes the values of (it,/?), 
(0 < it < /? < 0.2), at which there is a safe set for the asymmetric tent map Eqns. 00 There are 
no points on this plot above the diagonal it = /? since the control bound u is always less than the 
disturbance bound (3. The blank space at the bottom of the hgure denotes values of (it,/?) for 
which there is no safe set. The legend on the right shows how the colors correspond to measure 
(i.e., sum of lengths of components) of the safe set as a function of it and /?. The number of 
components in the safe set has also been marked for certain portions of the plot. 
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0.5 0.567 0.635 0.702 0.769 0.837 


Domain X 

Figure 8: The safe set of Eqns. as a function of it, with /3 fixed at 0.05 . 

Fig. i shows how the maximal safe set varies with il for fixed f3 = 0.05. The safe set has 2 
components for il > it* r; 0.45. At it = il* one of the components splits into two smaller components. 
At it Ri 0.0357, one of the components shrinks to a single point and below that the entire safe set 
vanishes. 

(i) At it Ri 0.45, the distance between the two component intervals is 2it, which results in one 
of the components splitting discontinuously into two smaller components as it is decreased. We 
call such a bifurcation a split bifurcation in the next section. 

(ii) At il Ri 0.0357, one of the component intervals shrinks to a single point, which in general 
results in one or more components disappearing as il is decreased. Here, the entire safe set 
actually vanishes. We call such a bifurcation a vanishing point bifurcation in the next section. 

4 Continuity of Safe sets 

4.1 The bifurcation theorem 

Throughout this chapter, we investigate the system described in Eqn. and assume that the 
target Q is a closed, non-degenerate interval [A, H], where A< B. will denote the maximum 
safe set at control bound it and perturbation bound (3. Recall that the maximum safe set for the 
target set Q is the set of states x starting from which a trajectory can always remain in Q, no 
matter what admissible perturbations occur. 

Definition Six,i 3 is continuous with respect to il and f3 at (ito,/3o) h when (il,/3) is varied in 
some sufficiently small neighborhood Af of (ito,/3o)5 the number of components in Six,i 3 remains the 
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same and the boundaries change continuously with (il,/3). 


Note that for the asymmetric tent map (Eqn. [^, / is not differentiable at 0.7 and this point 
is also never part of the safe set. 

The following theorem, which lays down sufficient conditions for bifurcations / discontinuities 


in the safe set to occur, is proved in Section 4.3 after some dehnitions are introduced. 


Theorem 4.1 (Bifurcation theorem) Let the map f (in Eqn. ^ he continuous, piecewise ex¬ 
panding and piecewise C^. Let Q be a compact interval. Let 0 <il < /? he the control and perturba¬ 
tion bounds respectively and assume that there is a nonempty maximum safe set and that f 
is differentiable in a neighborhood of Then if a bifurcation of the safe set S = Six,g occurs at 
(il,/3) then at least one of these conditions hold : 

(Bl) A component interval of S is a point. 

(B2) The gap between two adjacent intervals of S equals 2il. 

Moreover, (Bl) is also sufficient for a bifurcation to occur. 


If a bifurcation occurs at (il,/3), we say that it is a vanishing point bifnrcation if (Bl) holds 
and a split bifurcation if (B2) holds but not (Bl). 


4.2 Definitions and properties 

As usual, d{x, y) will be used denote the Euclidean distance between 2 points x and y on the real 
line. For a set A c M, dA denotes the boundary of A , A^ the complement of A and A the closure 
of A. 

Definition Let X c M. Then for every m > 0, let X + u denote the closed set of points that are 
within distance u from X. In other words, X + m is the set {x e Mj 3?/ e X 3 d{x,y) < u}. An 
equivalent dehnition is X + m = yj B{x,u), where B{x,u) represents a closed ball of radius u and 

xiX 

center x. 

Thus if X is compact, then X + m is a compact set. 

For a given compact set Q, control bound if and disturbance bound j3, the following equation 
from [2] gives an equivalent formulation for a set S' £ Q to be a safe set. It is a restatement of the 
property that if a; € S, then f(x) + is within distance u of S. 

/(S) + /?c^ + il (5) 
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Equation ([^ leads to a constructive proof of existence of the safe set, as shown in [2]. It was 
called the sculpting algorithm as it produces the safe set as the limit set of an inhnite sequence 
of diminishing compact sets. In general, iterative methods leading to invariant or optimal sets 
for nonlinear constraint problems often result in sets which are maximal with respect to these 
properties but with high geometric complexity. They were hrst employed in feedback-control 
systems in [6], [7| and [8]. 

Maximum safe set. Let the parameters il and f3 be hxed. Any union of safe sets correspond¬ 
ing to (if,/d) is also a safe set for (il,/?); hence, the union of all safe sets for these parameters is 
the unique maximal safe set. Since the closure of a safe set is also a safe set, the maximum safe 
set must be a compact set if Q is compact. 

If / : Q ^ M is continuous, Q compact and 0 < il < /d, then a maximal safe set Six^^ satishes 
the stronger equation (see Appendix |B.1[ ) : 

/(Su.fl) + /? = [/W) + /?]n[Su,„ + U] (6) 

Henceforth, the term “safe set” will be used to denote “maximum safe set”. 

The following dehnition of a safe set has already been introduced : 

Definition An,/? is continnous with respect to il and (3 at (ilo,/?o) if (il,/d) is varied in a neigh¬ 
bourhood AA of (ilo,/do), then the number of components in remains the same and the bound¬ 
aries change continuously with (it,/d). 

4.3 Proof of the bifurcation theorem 

The Bifurcation Theorem |4.1| gives necessary conditions condition for bifurcations to occur. We 
will hrst prove that condition (Bl) implies that a bifurcation occurs. 

Suppose (Bl) occurs. That is, one of the components of the safe set Sx,i 3 is a single point 
{p}. Therefore, the closed ball B{f{p),(3) is a subset of Su,i 3 +it. In fact, the component interval 
/ of S' + il which contains B{f{p),f3) shares a boundary point with B{f{p), (3). For otherwise, if 
B(f{p),/3) is in the interior of /, then since / is continuous, by choosing a small interval J around 
p, f(J)+(3<^I will be satished. Then u J is a larger safe set, contradicting the maximality of 
*Sn,/ 3 - So / does share a boundary point with B(f{p), (3). 

Now keeping (3 hxed, if il is decreased, for every 5 > 0, the components of S'u,/? + (il - 5) will 
shrink. Since Six-s,i 3 - S' 11 ,/ 3 , we get that Six-s,i 3 + (it - 5) is strictly in the interior of Sx,i 3 + it . 
Therefore, B{f{p),(3) cannot be a subset of Six- 5,13 + (il - <5) and hence p i Six-s,i 3 - Therefore, the 
component {p} vanishes and a bifurcation occurs. 
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(Bl), (B2) are necessary. We will prove that if neither of conditions (Bl) and (B2) are 
satished at some (ifo,/9o), then the safe set Six ,13 changes continuously with (it,/3) for (it,/3) near 
(ito,/3o)5 ie , the number of components in Six ,13 remains constant and if xi,X 2 , ■ ■ ■ are its boundary 
points, then they can be expressed as continuous functions of (it,/3) : a;i(it,/9), X 2 (it,/3),.... 

We will hrst track how the safe set changes when [3 is kept hxed at and it is decreased below 
ito- Since {3 will be kept constant. Six will be used to denote the safe set Six,p. The proof has two 
parts : hrst we establish the equations which the boundary points of S'uq satisfy and then we invoke 
the implicit function theorem to prove that the solutions to these equations vary continuously with 
if and hence, so do the boundaries of 

Since Six is compact, it is a disjoint union of closed, bounded intervals. So condition (Bl) does 
not hold iff all of these intervals are proper, that is, have non-zero length. 

For each boundary point Xj, consider the closed ball i?(/(xj),/^o)- By Eqn. at least one of 
the following two cases must be satished : 

1. B(f{xi),(3o) lies in the interior of +ito. Then Xi must be a point lying on the boundary of 
Q, otherwise, Six^ would not have been maximal. Then if we expect S^ to change continuously 
for if near ilo, then B(f{xi),(3o) continues to remain in the interior of S'u + il and hence Xi 
continues to be an element of Su- Since it is still on the boundary of Q, Xii^X) = Xj(ilo) is 
always a boundary point of Six for -ff near Hq. In particular. 

For every if near ito, fi^i) = constant (7) 

2. B(f{xi),(3o) shares a boundary point with S'^q +ilo. Then f{xi)±(3o = x„(i) ±ito, where x„(^i) 
is some boundary point of which is at distance ito from a boundary point of S'up +ito- If 
Six changes continuously for it near ito, then by the maximality of S^, the following equation 
will hold : 

For every it near ito, / (a:*) ± /So = ^^{i) ± it (8) 

Now Six can have countably many boundary points but since 511 +it is a compact set with each 
component having diameter > 2it, S'y + it has a hnite number of components. Therefore, the range 
of values of (j{i) is hnite and correspond to those a:o-(i)-s which are at a distance of it from the 
boundary of S'u + it. Without loss of generality, let the boundary points be renumbered so that 
Xi,..., are the Xo-(i)-s. 

Therefore, from Eqns. and it is clear that all the Xj-s are determined by the vector 
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X = (xi,..., Xn) alone. Define F 


Pn . TOn 


as : 




F(X) = 


fM 


( 9 ) 


Then all first n equations can be collected together as : 


F(X) = MX + A(il) 


( 10 ) 


where : M is an n-by-n matrix all of whose entries are 0 or 1 and which has at most one non-zero 
entry in each row; A(il) is a column vector whose entries e {0,±il± /do}- 

This is a system, which by the implicit function theorem has a solution iff its Jacobian 
with respect to X is invertible at it = ito- But this Jacobian = J - M, where J, the Jacobian of 


F is a diagonal matrix diag{Ji ,..., J„), where Ji = /'(xi(ilo)). By Appendix A.l, the factors of 


det{J - M) are either of the form (i) Jj or (ii) Ji^... Ji^ -1. Since by assumption, / does not have a 
zero derivative on the safe set, A factor of the form (ii) is also + 0 since \f'\ > 1 everywhere. 

Therefore, there exist continuous solutions in xi(it), X 2 (it),... of the dehning equation Eqn. 
of a safe set. When it is decreased below ito, the safe set Fy is always a subset of Fug. Since these 
solutions are also the unique solutions around it = ito, 2:1 (it), X 2 (it),... must the boundary points 
of the maximum safe set Fy. This means that the number of components of remain hxed and 
change continuously. |. 

Now that we have proved that changes continuously as it Hq , the proof to the Bifurcation 
theorem will be complete if the following two things can be proven : 

(i) >S'u,/ 3 o changes continuously as it ito. 

(ii) Six,i 3 changes continuously as (it,,5) ^ (ito,/do)- 

This will be done sequentially through the following two lemmas. 

Lemma 4.2 (Upper continuity of safe sets) If changes continuously as it->ilQ, then it 
also changes continuously as it ^ ito. 

Proof The lemma will be proved by showing that, in fact, safe sets are always continuous with 
it from above, that is, it always changes continuously as it -> itg. Since decreases with 

decreasing 6 , Six^^^s,go decrease continuously to iff : 


For every 0 < it < /3, Six,y = p Six+ 5 ,y. 

o>0 


( 11 ) 
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Let S denote the set n Su+s 3 - 

<5>o 

Since /3 is fixed in the above eqnation, it will be dropped from the notation. For all 5 > 0, 


£ Six+s 


Su c n 
(5>0 


Thus, it remains to be proven that S = n S^x+s - Six- It would be sufficient to prove that S' is a 

(5>0 

safe set. For all 5 > 0, f{Six+s) + P ^ Six+s + (if + 5) and S £ Six+s 
=> f{S) + /3 £ n [S'u +5 + (il + 5)] = n S'u +5 + il by Appendix 


(5>0 


(5>0 


B.3 


^ S' is a safe set for parameters (il, /3) S' £ S'u, the maximum safe set at parameters (il, /3). | 

Lemma 4.3 S'n^/j changes continuously as (il,/3) (ilo,/So) iff Six^y^ changes continuously as il 

ilo. 

Proof Consider the coordinates (il,/9-il), which are obtained by a smooth, invertible transforma¬ 
tion of the coordinates (il,/9). Therefore, it will be equivalent to prove that the safe set S changes 


continuously with these new coordinates. Continuity with respect to il follows from Lemma 4.2 


To prove continuity with respect to the coordinate /3 - il, we will prove that in fact, if condition 
(B2) is not satisfied at (ilo,/So), then for sufficiently small S, Su+s^y+s = S'u,/?. 

Let us assume that 5 > 0. The proof for <5 < 0 will be analogous. To prove the above identity, 
first note that 

For every 0 < il < /3 and every 5 > 0, Su,/? £ Six+s^g+s- (12) 

This follows from Eqn. [s] So it remains to prove that if (Bl) does not hold at (ilo,/3o), then for 
sufficiently small 6, Six^+s^gg+s £ Six^^g^, or equivalently, SiXg+s,go+s is a safe set for the parameters 
(iIo5 M- 

Consider any x e SiXg+s,go+s, which shall be abbreviated as S{6) for ease of notation. By defi¬ 
nition, the closed ball B{f{x),(3o + 5) c S{6) + (ilo + 5). Then the smaller ball B(f{x),/3o) must 
be at a distance of at least 6 from the boundary of S{6) + (ilo + <^)- Since (B2) is not satisfied 
at (ilo,/do), for every sufficiently small S, S{6) +ilo is precisely the set of points in the interior of 
S(6) + (ilo + <f) which are at a distance of at least S from the boundary of S{S) + (ilo + <f)- 
^ B{f(x),/3o) c S{6) +ilo, ^ f(S(6)) + /?o £ S{6) +ilo, ^ S(6) = SiXo+s,go +5 is a safe set corre¬ 
sponding to the parameters (ilo,/do)- | 

This concludes the proof of the Bifurcation theorem. | 

4.4 Evolution of the safe set for the given example 


The Bifurcation Theorem 4T says that for non-bifurcation points, the boundary points of the 
maximum safe set changes continuously. In this section, we will use the main example of the 
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asymmetric tent map (Eqn. to illustrative that the boundary points are the smooth solutions to 
a system of differential equation. The main theorem is stated here as claim and we proceed to prove 


it for the specihc case under consideration. We will re-visit the case shown in Fig. ( 6 b), where the 
safe set corresponding to if = 0.04 and [3 = 0.05 has the three components, [oi, bi] r; [0.5747,0.6141], 
[ 02 , 62 ] ~ [0.7371,0.7542] and [ 03 , 63 ] [0.8019,0.8084]. We can make the following claim. 

Claim : For u near 0.04, the boundary points of the safe set change continuously as functions 
of if, and satisfy the following : 


^ dai ^ 
dU 


^ /'(63)-/'(a2)/'(63)-/'(ai)/'(a2) ^ 

dbi 

dU 

1 

/'(a2)(/'(6i)-H/'(«i)/'(63) - 1) - /'(oi)) 

da2 

diX 

f'Mf'Mf'ibs) - 1 

f'Mf'ih) - - 1 

dbs 

\ diX / 


^ l-/'(ai)/'(a2)-/'(a2) y 


and /( 62 ) = 02 + /d - if, /( 03 ) = 61 + it - /3. 

Proof : Neither of the two bifurcation conditions (i) and (ii) of the Bifurcation Theorem 3.1 
are satished, since 

Bl : the two gaps between adjacent intervals are 02 - 61 0.123, 03 - 62 Ri 0.0477 while 2il = 0.08. 

B2 : none of the component intervals is a single point. 

Denote the safe set at it by 5^, with (3 hxed at 0.04. According to Def. 3.3, the dehning 
equation for a safe set is /(5'u) = f{Q) n (S'u + it-/3). For it near 0.04, this relation simplihes to : 

f{Six) = 5'u+it-/?, because at it = 0.04, S'u + it-/? = [oi +/3-it, 61 -/d + it] u [02 + /3-it, 63 -/ 3 +it] r; 
[0.5847,0.6043] u [0.7471,0.7985] and f{Q) r* [0,0.91] => S'n + it-/d. These relations hold for all 
values of it sufficiently near 0.04, because f(Six) = + it- /3 will be satished here and because of 

condition (i), Su + ^- P will have three intervals which can be explicitly written down as above as 
continuous functions of it. 

Moreover we have : 


fM ^ 


' 02 + /? - it '' 

/( 61 ) 


63-/3+it 

fM 


Os - /S + it 

fM ^ 


Oi + /? - it ^ 


and 

/( 62 ) = 02 +/5 - it,/(as) = 61 +it -/3 (14) 

Note that in the system of equations given above, the variables 62 and 03 are completely 
determined by the variables ( 01 , 61 , 02 , 63 ), hence it is sufficient to consider he solution in these 4 
variables. 
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By the implicit function theorem, these 4 variables, which have been represented as solutions 


to a set of equation, vary continuously with it iff the Jacobian of the system of equations (13) 


with respect to these 4 variables is invertible, or equivalently, the equations can be differentiated 
with respect to it to obtain an ordinary differential equation (ODE). The derivative of the above 
system of equations with respect to u gives 


/ 


/'(ai) 0 0 0 

0 f'ih) 0 0 

0 0 /'(aa) 0 

0 0 0 f'ih) 



^ dai ^ 
dll 



dfei 

dlT 



da2 

dU 



d^ 



0 0 10 
0 0 0 1 
0 0 0 1 
10 0 0 


\ 


^ da I ^ 
diX 
dbi 
diX 
da2 
dU 

diX 


1 

1 

-1 


Rearranging : 

' f'M 0 

0 nh) 

0 0 

. -1 0 

The matrix on the left has determinant f {bi)[f'{ai)f {a 2 )f (b^) - 1], which is non-zero since 
l/'l > 1 everywhere except 0.7, which is not in the safe set. As a result it can be inverted to obtain 
an ordinary differential equation in (oi, 6i, 02 , fes), which the reader can verify to be the one in the 
claim. Therefore, under the given conditions, the safe set not only changes continuously but its 
boundary points also satisfy an ODE. 


-1 0 

0 -1 

f'M -1 

0 f'ibs) 


^ d(ffli) 

diX 

d{bi) 

diX 

d(ffl 2 ) 

dll 
djbs) 

\ diX / 


/-l^ 
1 
1 


4.5 A closer look at the bifurcations 


Split bifurcation. According to the Bifurcation theorem (4.1), this situation occurs when the 


distance between two adjacent components of the safe set is equal to 2u. As a result, either the 
safe set vanishes or a component splits into two or more components. The following lemma gives 
a set theoretic version of the split bifurcation condition : 


Lemma 4.4 Let X c W be compact. Then no two adjacent connected components of X are at 
distance 2il from each other iff for all sufficiently small (5>0, X + il-J = X + (il-J). 

Only a split bifurcation can lead to a splitting into 2 or more new components. In Figure 7, 
which shows the measure of the safe set as a contour plot, two kinds of boundaries can be seen 
between the different regions in the plot. It is at these boundaries that the bifurcations occur. 
The values of (it,/!) where split bifurcations occur, must be those boundaries separating regions 
of the plot with different components. Though they are straight lines for the tent map, is systems 
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like the logistic map, they are generic curves. Figure 8 showed such a split occurring at the point 
(/9 = 0.05;it = 0.045), which is very near such a boundary. 

Vanishing point bifurcation. In Figure 7, the vanishing point bifurcations occur are seen 
to be occurring along straight lines with slope 1. Theorem |4.5| below proves that this indeed is the 
case. For any perturbation bound /?, there is a value Umini/3) , which is the minimum of all values 
of it for which the safe set exists. The following theorem states that the set of pairs of the form 
{(uminiP),/3) form straight lines with slope 1 almost everywhere, wherever the pair is not a split 
bifurcation point. 

Theorem 4.5 If for some (Iq > 0, {uminiM, M is not a split bifurcation point, then the graph of 
Umin is a straight line with slope 1 near (3 q. 

Proof Let for small 6, Ss denote the maximum safe set at it := UminiPo + 5), (3 = Po + h and il <5 
denote the set UminiPo + <^)- Therefore, Ss is the maximum safe set at (it5,/9o + <^)- 

Then by assumption, f{So) + (Iq = Sq + ito- Taking closed 5 > 0 balls around the quantities on 
both sides of this equation, we get 

[/(*S'o) + /^o] + ^ = [*S'o + ito] + ^ f{So) + + 6) = So + (ilo + 5). 

So is also a safe set for (ito + <5, /^o + ^)- Therefore, for 

For > 0, Mmin(/3o + <^) < UminiM + 3. (15) 

Let Ai be the maximum distance between adjacent components of Sq which are less than or 
equal to 2ilo distance apart. Then since a split bifurcation does not occur at ito,/5o, Ai < 2ilo. 
Then A := 2ilo - Ai > 0. So if 3j/ e M such that d{y, So) > 0.5Ai = ito - 0.5A, then y i So+Sio 
Claim. For V(5 > 0 such that 6 < 0.5 A, So is a safe set for (ito - 3,/3o - h). 

Proof. Suppose the claim is false. Then 3x € So such that B(f{x),(3o - <5) is not a subset of 
5*0 + (ito-(f). Then 3y = f{x)±(fto-h) i S'o + (ito-(f). This implies that d{y,So) > ito-^ > ito-0.5A. 
We have seen that this implies that y ^ S'o + ito. 

But y e /(S'o) + (/fo - S) a /(S'o) + /fo = 5'o + ito, a contradiction. Hence the claim must be true. 
Therefore, it follows from this claim that. 


For VO < (5 < 0.5A, - (5) < - S. 


(16) 


The constant A can be chosen to be constant for all points in any small neighborhood of (3o- 


Therefore, the two inequalities (15) and (16) together prove the claim of this theorem. | 
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A A result on matrices 


Lemma A.l Let D = diag(di,... ,dn) be a diagonal matrix and M annxnO-1 matrix with at 
most one 1 in each row. Then the factors of det{D - M) are of the following form : 

(i) di 

(ii) di^ ...di^^-l. 

Moreover, a factor of the form di^... di,, - 1 occurs iff the principal matrix of M with indices 
ii,...,ik is a permutation matrix corresponding to the cyclic permutation {ii,.. .ik)- 

Proof The proof will be by induction on n. The base case n = 2 can be verihed by enumerating 
the few possibilities for the matrix M. 

For general n, there can be two cases : 

(i) there exists a column in M with all entries 0. Without loss of generality, this column is the first 
column. Then det(D-M) = didet{D'-M'), where D', M' are obtained from D, M respectively by 
deleting the hrst rows and columns. By the inductive assumption, det{D' - M') has the prescribed 
format and hence so does det{D - M). 

(ii) All columns in M have a non-zero entry. Since there is at most one 1 in each row of M, 
there are at most n 1-s in M. Hence M is a permutation matrix. Using the cycle decomposition 
of permutations, the rows and columns may be permuted (without changing the determinant) so 
that D - M is in block diagonal form. Hence, its determinant is the product of the determinant of 
the blocks. Hence, it is sufficient to prove the theorem for the case that M is a cyclic permutation 
matrix. If M is a cyclic permutation matrix, then det{D - M) = det{D) - 1 Hence in either case, 
det{D - M) has the prescribed format. | 

B Safe sets 

Proposition B.l (The maximality criterion) The maximal safe set satisfies f {Six, 13 )+P = 

[f(Q)+P]n[Sn.p+U]. 

Proof For the rest of the proof, let S denote the maximum safe set Six,/ 3 . Note that since S ^ Q, 
f{S) + P £ [f{Q) + P]- By the dehnition of a safe set, f{S) + /3 £ [S' + il]. Therefore, f{S) + p must 
be a subset of [f{Q) + /S] n [S' + if]. 

Suppose equality does not hold. Then in particular, /(S') + P must be a strict subset of 
[f{Q) + P'\- Since these are both compact sets, there must be a boundary 2 : of /(S') + P and in the 
interior of f{Q) + P- So there is a point y on the boundary of /(S') at distance P from ; 2 . Note 
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that y must lie in the interior of f{Q), for if y was on the boundary of f{Q), then z would have 
been on the boundary of f(Q) + (3- 

Now, y = f(x) for some x € S. We will prove that x must be a boundary point of S. Take any 
open neighborhood U of y in f{Q). Since / is continuous, f~^{U) must be an open neighborhood 
of X. So if X was an interior point of S, then by choosing U small enough, f~^{U) could be 
contained inside S. This leads to a contradiction, because U = f{f~^{U)) and U is not a subset 
of the image f(S). 

Thus a: is a boundary point of S and in the interior of Q. Since / has been assumed to be 
piecewise expanding, (4b) if x is perturbed slightly so as to increase S, the image y = f{x) would 
also get perturbed slightly. Hence, z, the corresponding point on the boundary of f{S) + (3 would 
also get perturbed slightly and still lie in the interior of f{Q) + (3. This contradicts the maximality 
of 5. I 


Lemma B.2 Let for S > 0, Ks be a decreasing sequence of compact sets satisfying Ks £ Ks' if 
S < 6'. Let K = n Ks Then for all e > 0, there exists 5 > 0 such that dHauss{K,Ks) < e. 

( 5>0 

Proof If the contrary is true, then for all 5 > 0, there exists xs e Ks so that d{K,xs) > e. These 
xs-s have a limit point x, which satishes d{x,K) > e. Since the Ks-s form a decreasing sequence, 
X e Ks for every 5 > 0. Therefore, a; e n Ks = K, which contradicts the fact that d{x, K) > e. | 


Lemma B.3 Let for 6 > 0, Ks be a decreasing sequence of compact sets satisfying Ks £ Ks' if 
5<6'. LetK= nKs^^. Then n [Ks + (u + 5)] = K + u. 

S>0 5>0 


Proof The intersection n (m + 5)] contains the set ii'+ m. Let y ^ n [Ks + {u +6)]-[K+ u]. 

< 5>0 5>0 

Then d{K,y) =u + e for some e > 0. By Lemma B.2, for 6 sufficiently small, dnaussiKs, K) < 0.5e. 
So for 6 < 0.5e, duaussiKs + {u + 5),K + u) < e. But we have assumed that yen [Ks + (u + <5)1, so 

< 5>0 

d{K + u,y) < e and d(K, y) < u + e, a. contradiction. | 
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